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Pass server certificate to engine use 
CKCMD_AUTHENTICATE 
3154 

I 

Retrieve ESessionKey and pass it to CKU Server 
~"' '•- ' 3164 "~ ■ 

Receive unlock data from server and pass it to engine 
use CKCMD_UNLOCK_FILES 
3174 

I ~ 

Report status of unlock operation to server 
3184 

i ~ 

update play list on media that is coupled to engine to 
include newly unlocked content 
3194 
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Master Server accepts connection from CKU Server 

3310 



Master Server acknowledges connection 
3320 



Master Server receives CKU Server CKDRM 
Certificate, engine's CKDRM Certificate, media SCID 
and DFS file handles from CKU Server 
3330 
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Master Server verifies validity of both certificates by, 
for example, checking MAC and PKI signatures 

3334 



Master Server checks Revocation database to make 
sure there are no revoked certificates pending 

3336 



Master Server retrieves requested Key Complements 
from Key Complement Database 
3340 



Master Server encrypts Key Complements using 
CKU Server Public Key 
3350 



Master Server transmits encrypted data to CKU 

Server 
3360 



Master Server receives acknowledgement from CKU 
Server and disconnects 
3370 
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Client accesses formatted URL, such as URL 
on media disk or URL associated with serial 
number on media disk or other source 
3410 


i 


r 


Client presents query string containing SCID 
and locked content status 
3420 






Web server constructs page to present offers 
to consumer using data from Offers and Ul 
Elements databases 
3430 




r 


Web server delivers "Unlocking in Progress" 
page to client 
3440 




r 


Web server generates unique SessionID that 
is used later to commit transaction after 
unlock process is verified 
3450 




f 


Web page embeds CKU Client object and 
contains client-side script that tells CKU Client 
to begin unlock process 
3454 




r 



Web server stores the SCID and list of D FS 

File Handles indexed by SessionID in 
Transaction Database for later use by CKU 
Server object 
3456 
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Engine receives handle and key 
complement to key box 
3610 



CP 
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Engine performs key box look up 
3620 
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r . 


Keys within key box are 
unbound and decrypted 
3630 
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Keys are rebound, encrypted 
and locked 
3640 
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DCS Order Mgmt Server inserts records DCS_STAGE table 

with or without a Media ID 
3802 

i 

DCS Order Mgmt Serve generates a web page with a CKU 

Client instantiated with a Transaction ID 
3804 

i 

CKU Client obtains the Engine's CKDRM Certificate 
3806 

I 

CKU Client obtains the unique Media ID (if this is not 
already established the engine will do so) 
3808 

l 

CKU Client obtains the Server's ContentKey Certificate 
3810 ' 

I 

CKU Client obtains the ESessionKey from the Engine using 

the CKU Server's CKDRM Certificate 
3812 

l ~ 

CKU Client makes final unlock request for validating and/or 
updating the DCS_STAGE table with the Media ID, 
authenticating the Engine, obtaining the File Handle/Key 
Complement/Version list and Wrapping the File Set 
3814 

CKU Client sends the wrapped file set to the Engine so the 
Engine can unlock the content 
3816 

l 

CKU Client sends the final transaction status message to 
the server and displays a "Trx Complete" message to 
customer/user 
3818 

1 

DCS Order Mgmt Server receives the status complete 
notice, and deletes DCS_STAGE records for that 
transaction and updates transaction 
3820 
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Receive media containing locked content 



Auto-Run Handler (or Content Manager) requests and obtains a Contents.ddl 

file 

: 



I 



Auto-Run Handler (or Content Manager) parses the Contents.ddl fie to obtain 
the PackageCollectionID, PackageCollectionSKU, UnlockURL, Primary 
PackageSKU List + Business Entity ID, and a list of previously unlocked 
PackageSKU's 
4006 



Ci 
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Auto-Run Handler (or Content Manager) appends the data to the URL and 
opens the default browser which will display a web page created by the eTailer 

4008 



ETailer presents user/customer with a series of pages to process the 
eCommerce transaction 
4010 



After a user/customer completes the transaction (e.g. clicking button and 
prompting eTailer) thereby requesting eTailer to notify the DCS of the 
ContentKey Unlock Transaction, eTailer passes the DCS the PC ID, and a list 
of PackageSKU's that are to be unlocked 
4012 







The DCS Order Mgmt component generates a unique Transaction ID and will 
insert one record for each Package purchased. At this point, the Media ID is 
not know so it will contain a null value. 
4914 
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The DCS replies to the eTailer with a failure message or a URL that the user/ 
customer uses to unlock content. The Unlock URL contains the Transaction ID 
that was generated by the DCS. 
4016 
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The eTailer generates a final confirmation and unlock instructions page that 
contains the Unlock URL. 
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